[APP] PrivateNumbers (version 0.0.0.4) With Tutorial

[CLOVIS KKK]

Store your secret contacts and notes securely in your phone AND in your PC. Use the contacts to make calls and send SMS messages.
(don't forget to delete the call and message history).

No worrie to loose secret contacts and notes anymore (you still can't loose password).....now you can transfer PrivateNumbers database between your Windows XP and the Ming. You can also edit the PrivateNumbers database securely on your desktop. PrivateNumbers is now Client/Server.

More details and installation instructions HERE

(Edit - this link seems to no longer work - file attached below)

Enjoy.


===============================================

This is a Java software wich stores secret contacts and annotations, make calls and send SMS messages.

The last version can be used to store any text and is Client/Server (use PrivateNotes Desktop on the PC as a server).
Main Features

* Store contats and other information securely.
* Make calls and send SMS messages to stored contacts.
* It has two executables that can run independently or together.
o PrivateNumbers - installed on the mobile device (a cell phone or other MIDP 2.0 device).
o PrivateNumbers Desktop - to run on the Desktop PC. Can be used to make backup, and to read and edit contacts.
* Use AES 128 encryption algorithm.
* Encryption keys are created using PBE SHA1 with 1000 iterations.
* Exchange data between Desktop and Mobile program.
* Bluetooth or TCP/IP communication (bluetooth is only available on Windows XP).

Because it uses part of the "The Legion of the Bouncy Castle" Java cryptography APIs, you will see its license when you open it.


EDIT 2007-03-25 - v0.0.0.2: Now you can also send SMS messages.

EDIT 2007-05-28 - v0.0.0.4: New Desktop Edition - you can transfer database from phone to desktop and vice-versa.

* Added option to change the password.
* Two new fields: email and contacts.
* New full featured desktop edition that can manage illimited databases, export data to XML and exchange database with mobile edition.
* Exchange database between desktop and mobile device editions.

[CLOVIS KKK]

Just 2 tips:

1 - you can use it to keep other informations....the phone number field accept anything.

2 - if you use it to initiate a call, then don't forget to erase the number from the phone's Call History.

[JamesK]

This is shaping up to be a great app. Keep up the great work!!

There appears to be a major lack of good crypto based apps for the A1200 and ROKR E6.

Given your good skills with J2ME, would you consider trying to get the following app working on the A1200?

http://www.motorolafans.com/forums/viewtopic.php?t=9454

The app runs on the phone, but the import/export functionality does not work.

Keep up the great work!

JamesK

[CLOVIS KKK]

This is shaping up to be a great app. Keep up the great work!!

There appears to be a major lack of good crypto based apps for the A1200 and ROKR E6.

Given your good skills with J2ME, would you consider trying to get the following app working on the A1200?

http://www.motorolafans.com/forums/viewtopic.php?t=9454

The app runs on the phone, but the import/export functionality does not work.

Keep up the great work!

JamesK

JamesK

I just tried Safe. I can look at FileAtor later today.

About Safe
1 - it seems that the export function has a bug or it was made for a specific hardware. I can look at it and suggest a change to the author so it can run in E6 and A1200 but it will take some time.

2 - I don't recomend this program if you need real security (few applications need).
It stores the password in the form of a Hash (MD5).
Hash functions are fast.
To break the security in this program you don't need to break the cryptography.
You can even use brute force to test all passwords (with dictionaries if you want to be faster) and just make a hash of that password and compare with the stored one.
And, there is a better approach to break security of this program because it uses MD5 whereas the recommended (today) is SHA1.

MD5 was designed by Ronald Rivest in 1991 to replace an earlier hash function, MD4. In 1996, a flaw was found with the design of MD5; while it was not a clearly fatal weakness, cryptographers began to recommend using other algorithms, such as SHA-1. In 2004, more serious flaws were discovered making further use of the algorithm for security purposes questionable

Here is the original paper
http://www.infosec.sdu.edu.cn/paper/md5-attack.pdf



Security rule: Never store the password and never store anything to easily validade the password.


I can make PrivateNumbers to store an optional TEXT field with every contact and an import/export function.

There will be 2 changes in PrivateNumbers security:
1 - keep the password in memory for less time (i think less the 1/10 of a second).
2 - create different session keys to cipher each category.

the second change is a major security improvement because few things will be encrypted with the PBE Key. And the data will be encrypted with very strong keys not derived from the passkey.

Another improvement I am think of is not related with security and I think people will like it.

[JamesK]

Hi,

Thanks again for the great development efforts!

If you would be able to add a text field to PrivateNumbers and import/export functionality, I think this would be a killer app.

Hmm, I wonder if there would be a need in the community to create a text editor that supports strong crypto (based on the same crypto code you've already written in PrivateNumbers).

I've been thinking that if we could write a text editor that supports strong crypto and have an equivalent (ideally java based) desktop equivalent then we would be able to access the same encrypted data whether using the phone or a computer.

This would mean that you could have a single source for all your encrypted data and therefore not run into the problems of duplicate data etc.

Whatever path you decide to go down with your future development, please know that your efforts are DEFINTELLY appreciated!!

Have a great weekend.

JamesK

[JamesK]

Hi,

I really think that this app is the beginning of something fantastic! Please keep up the development.

Having spent a bit more time with the new app, here are few random ideas:

1) Add search functionality.
2) Add import / export functionality to backup data on PC.
3) Add a notes field for each contact.
4) Allow for the option to view a contact - currently you can only edit or call but not just view. Perhaps the key sequence could be (view or edit) and in the view mode there would be a button to call. No, on second thoughts, just have the options new and view on the high level. And under view, have the options call or edit.

I hope this makes sense, I can write this down more clearly if need be.

I'm looking forward to the next version!!!

Regards,

JamesK

[JamesK]

Hi there,

Have there been any further developments with the app? I'm looking forward to testing the new version.

All the best,

JamesK

PS: The SMS *and* Call options are a fantastic addition!

[El Negro]

will this ''private numbers'' app will work in a e6 does anyone has try it

[CLOVIS KKK]

will this ''private numbers'' app will work in a e6 does anyone has try it

yes.
and many other mobile devices.